WAN fully used but apparently no traffic
-
Hi. I'm in a weird situation: my WAN is fully used, but apparently not IP is making that traffic (see homepage screenshot).
Even bandwidthd doesn't seem to find a culprit.What could be generating such traffic? How to find it out?
thanksP.S. on a side note CPU usage seems strangely high, load is ~1.4 with just few clients on the network and no proxy



 -
Diag>Packet Capture, start a capture on WAN with count 0 and let it run for ~30 seconds or so, then stop it. Download the resulting pcap, open in Wireshark, go to Statistics, Conversations.
-
I found out that one of my WAN had DHCP issues… pfSense didn't have the IP anymore and was doing weird things.
Since I couldn't wait more I had to restart the firewall and this fixed, but thank you very much for the suggestion I'll use next time!